Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
File: 1T5Pyhar83QtTaK_nD2abpHpbuU.mft (raw, json)
Hash identifier: FqzOVa724Ayn0xOYlaiw30o5cSRzz3PPxo3ox+eVBYU=
Subject key identifier: 2B:D2:B8:E4:99:42:4D:57:A7:1E:F5:7C:5D:8C:FD:D5:F0:A8:F9:12
Authority key identifier: D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
Certificate issuer: /CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Certificate serial: 0199228CAE0CFCFCD7A1A98B44C3531BB392
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
Manifest number: 1384
Signing time: Sun 07 Sep 2025 05:01:08 +0000
Manifest this update: Sun 07 Sep 2025 05:01:08 +0000
Manifest next update: Mon 08 Sep 2025 05:01:08 +0000
Files and hashes: 1: 1T5Pyhar83QtTaK_nD2abpHpbuU.crl (hash: dcqOpWrTTGdiEfRY131kGW108NgDmujZzk4SiIq6V8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ae:0c:fc:fc:d7:a1:a9:8b:44:c3:53:1b:b3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53e4fca16abf3742d4da2bf9c3d9a6e91e96ee5
Validity
Not Before: Sep 7 05:01:08 2025 GMT
Not After : Sep 8 05:01:08 2025 GMT
Subject: CN=2bd2b8e499424d57a71ef57c5d8cfdd5f0a8f912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:11:e9:3a:a8:98:1b:7f:2c:bd:e3:78:a9:e7:
41:f9:21:7e:06:33:b3:0c:98:1e:2e:a5:31:9c:bf:
79:e5:2f:d3:f6:e3:b7:60:2d:9d:11:49:48:e9:ba:
57:bb:6f:b6:7a:13:a5:6f:a2:09:ab:6d:0d:9f:4a:
8b:d8:89:00:81:27:a2:5d:aa:68:79:97:ef:e5:9d:
a5:d4:ac:e3:8d:ba:02:dd:e4:97:8f:99:73:fc:f3:
07:64:02:68:04:1b:9d:15:cc:c4:fc:c3:17:23:a3:
c8:d3:f0:07:96:17:f2:81:bf:dd:67:fc:0e:b2:da:
c2:53:12:dc:ae:ed:07:40:af:7d:65:03:11:52:67:
3a:ff:82:f3:46:e5:58:e1:f9:1c:35:50:a3:4f:92:
fd:00:67:de:47:7a:7e:8c:d2:53:a5:f6:03:97:77:
af:7d:be:93:65:e5:f9:e8:79:1c:45:f6:c9:38:2c:
df:8c:24:15:01:95:02:cc:11:03:83:43:a2:53:46:
ed:02:d6:01:56:03:ac:65:62:e7:4c:be:01:fe:11:
44:a3:6e:2f:8a:49:ff:03:20:22:d7:52:5f:99:a6:
58:5f:20:d8:db:5f:44:d5:15:e6:13:40:b4:85:dc:
31:3d:06:2d:60:f2:b3:76:cb:e6:ca:e1:4a:9c:aa:
07:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:D2:B8:E4:99:42:4D:57:A7:1E:F5:7C:5D:8C:FD:D5:F0:A8:F9:12
X509v3 Authority Key Identifier:
keyid:D5:3E:4F:CA:16:AB:F3:74:2D:4D:A2:BF:9C:3D:9A:6E:91:E9:6E:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T5Pyhar83QtTaK_nD2abpHpbuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3df09b-61ed-4083-978b-263350dec194/1/1T5Pyhar83QtTaK_nD2abpHpbuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b3:f0:04:2d:7c:6d:1d:99:f3:e4:03:2e:87:c2:04:87:89:
4a:1b:9d:6f:5b:9d:68:e6:d3:f7:46:5a:8a:87:27:bf:94:c1:
3e:98:7e:dc:7d:1f:23:36:07:6b:47:81:24:c7:0f:af:47:20:
20:ca:3d:02:85:10:0e:33:06:13:63:6e:7d:97:11:79:c5:cf:
98:3e:83:5d:e7:b4:21:aa:34:71:b4:44:ca:a6:90:d3:6a:1a:
5f:66:c5:32:4f:1c:9b:c3:ff:74:47:7d:d5:4e:9c:36:23:98:
ac:a5:28:01:55:bd:42:69:c4:81:20:c3:66:31:fb:cf:7b:61:
d6:8d:d6:d4:49:af:19:d1:fc:df:cd:20:c1:03:51:aa:78:4b:
77:86:a5:4b:65:ff:1f:5b:41:1f:3e:15:54:db:00:47:94:5e:
aa:65:6c:e8:d3:1d:48:c1:0d:32:6c:48:15:ea:66:1a:11:c4:
b3:9e:d4:c3:95:44:fc:db:5b:df:9d:e9:f6:77:e7:08:ea:9a:
40:89:34:a5:22:35:a2:f1:0f:44:88:b1:ee:a0:26:bf:6d:ae:
e3:d8:ee:b8:ed:e3:a8:cb:28:a3:04:91:1c:4a:22:4e:85:ee:
c5:12:a8:ca:45:87:90:d8:a4:c2:9b:5f:f3:20:44:c2:b7:31:
27:f1:7b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:40 2025 by rpki-client